Privacy and Cookie Policy

1. Data controller

The controller of personal data is Webrevolution Szymon Kosok, ul. Nowa 21/10, 41-908 Bytom, Poland. Contact for data matters: szymon@mwg.pl.

2. What data we collect

  1. Account data: e-mail address, password (stored only as a secure hash), nickname and the data of characters you create in the game.
  2. Gameplay data: content created in the game (characters, books, songs, posts, comments) and game statistics.
  3. Payment data: order identifiers, amounts and transaction status. Card and bank details are processed exclusively by the payment providers (PayU, Stripe) - we never have access to them. For orders we store the IP address and browser identifier to prevent abuse.
  4. Technical and security data: server logs, error reports, a browser security identifier, and a hash of the connection network used to maintain the service, limit automated account creation and prevent abuse. During registration, Cloudflare Turnstile receives technical connection data to verify that the request comes from a human.
  5. Analytics data: anonymised usage statistics (Google Analytics 4 with IP anonymisation) and, when registration starts from a tagged link, the UTM source and campaign name linked to the account - only with your consent.
  6. Content passed to AI features: data entered when generating content (e.g. character descriptions, song parameters) is passed to external AI providers to deliver the service.

3. Purposes and legal bases

  1. Providing the service (account, gameplay) - art. 6(1)(b) GDPR (performance of a contract).
  2. Handling payments and complaints - art. 6(1)(b) and (c) GDPR.
  3. Service security, abuse prevention, error diagnostics - art. 6(1)(f) GDPR (legitimate interest).
  4. Statistics and analytics - art. 6(1)(a) GDPR (consent given via the cookie banner).
  5. Service messages (e.g. registration confirmation, password reset) - art. 6(1)(b) GDPR.

4. Who we share data with

We use the following processors:

  1. Twilio SendGrid - e-mail delivery (e-mail address).
  2. PayU S.A. and Stripe - payment processing.
  3. Google Ireland Ltd. - Google Analytics 4 statistics (with consent).
  4. Functional Software, Inc. (Sentry) - application error monitoring.
  5. Cloudflare, Inc. - bot protection for registration (Turnstile).
  6. OpenAI and ElevenLabs - AI content generation (graphics, texts, audio) based on data entered in the game.
  7. The hosting provider of the service infrastructure.

Some of these processors may process data outside the European Economic Area - in such cases the transfer is based on standard contractual clauses or adequacy decisions. Data may also be disclosed to authorised authorities given a valid legal basis.

5. How long we keep data

  1. Account data - for as long as you use the service. Accounts inactive for a prolonged period may be deleted together with related data.
  2. Order data - for the period required by tax and accounting regulations.
  3. Technical logs and error reports - up to 90 days.
  4. Registration source and campaign - until the account is deleted or earlier removal is requested.
  5. An unverified provisional account - deactivated after 24 hours if registration is not completed and anonymised after a further 7 days. Hashed security counters are deleted 7 days after their window closes.

6. Your rights

You have the right to access, rectify, erase and port your data, to restrict processing and to object to processing. You can withdraw analytics consent at any time - click (also available in the page footer) and choose "Necessary only". Consent expires automatically after 12 months and we will ask again. You also have the right to lodge a complaint with your supervisory authority (in Poland: the President of the Personal Data Protection Office).

7. Cookies and similar technologies

  1. Necessary (always active): the login session cookie, language selection cookie, registration security identifier (up to 30 days), and the cookie-consent choice. Without them the service cannot work or safely offer registration.
  2. Preferences (always active, stored locally): selected colour theme and time zone - stored in your browser (localStorage), never sent anywhere.
  3. Analytics (optional, with consent): Google Analytics 4 cookies (_ga and related) used for anonymous visit statistics. Loaded only after you consent in the banner.

You can accept or decline in the cookie banner on your first visit. Your choice is stored in your browser.

Last updated: 2026-07-19

An error has occurred. Reload